Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: Moy7SAVbIPguKDgofyOsX4rXrfQkrQPqQ7NVdMeJsUY=
Subject key identifier: E1:5F:A2:E9:79:88:67:29:4B:0C:E2:1B:60:9D:2A:C4:B1:47:44:4B
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019A714A32334B615C007B7421602148DE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 0FDE
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
2: D6YciS_w4aBGgTwchVv0zjl3KM8.roa (hash: 0I0L8dvu+mXVyzn+otu0YMQ4J1Sqc+LW0CCIWiAWR+s=)
3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=)
4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: 9gOb2SGWDRCE2gLTkpPWLj9CR31SDnyUEa4yu9FnSyk=)
5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:32:33:4b:61:5c:00:7b:74:21:60:21:48:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=e15fa2e9798867294b0ce21b609d2ac4b147444b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:f5:06:52:28:0f:2b:c1:c6:fb:0a:f3:0c:
84:84:b3:7a:db:9e:bd:45:33:c4:e2:6a:94:ca:dd:
85:8a:ae:3b:91:e1:90:49:76:3d:08:10:d9:c3:ac:
41:84:89:b7:0b:0f:04:29:df:f8:52:21:21:8b:88:
d2:d3:73:32:2e:93:fb:52:03:f7:52:03:ec:fa:78:
de:8d:a4:c5:2a:9f:45:a5:fe:ca:70:6d:b1:77:e7:
dc:24:72:43:ce:4e:2d:65:c8:8c:51:cd:61:d0:d7:
5d:9e:be:a8:6d:b0:76:c5:a1:47:bf:7a:88:99:c9:
a7:30:6b:0f:b4:db:7e:0c:f5:99:ea:5d:b0:02:c4:
ff:1f:bd:cc:8f:11:b7:0b:23:dd:c4:c8:5d:cb:ce:
5c:e4:97:c4:b7:c2:4f:07:bd:7f:fa:43:75:06:b9:
49:0a:2c:fe:f0:55:58:ce:d1:2a:3e:c2:18:d1:90:
18:35:21:91:dd:6e:36:81:4d:ab:9b:91:4b:d4:1b:
08:cf:a1:e9:70:86:95:5d:60:d4:f9:39:38:e0:c1:
05:55:4f:8e:1f:15:da:69:7d:97:64:dd:b4:6e:a6:
08:d0:38:81:1e:d8:7b:f2:70:fb:74:1f:ab:c2:d9:
5f:4a:7d:62:52:52:fe:7c:4e:4c:e2:be:11:53:4e:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:A2:E9:79:88:67:29:4B:0C:E2:1B:60:9D:2A:C4:B1:47:44:4B
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:72:d2:3c:2a:a3:5e:d2:e3:78:71:46:31:ef:90:50:b1:ef:
5a:80:3f:d5:aa:8a:f1:0e:b8:82:90:7d:27:54:5d:62:11:ac:
bf:4e:d2:aa:36:6e:7b:f6:c3:c8:3c:67:e0:8a:50:19:29:13:
c5:be:f6:95:c5:bb:ef:c3:92:08:0b:11:ac:dc:fb:c0:e6:16:
7a:34:37:58:33:ea:9b:f7:d2:27:f4:6f:e9:ae:70:e6:b4:85:
7e:34:0b:09:39:8e:b4:cb:79:58:44:da:29:52:e5:39:ef:a9:
60:7e:1e:9d:09:22:2c:67:4a:f4:ab:99:5e:d4:0e:ef:d3:af:
ad:ab:d0:dd:25:2e:98:e4:2e:6b:70:86:c0:79:70:49:3a:93:
2f:02:2a:d0:ee:9f:41:49:7f:d5:e3:71:a6:f3:bb:bd:58:61:
76:32:b5:22:ce:60:72:08:a1:ef:96:b9:47:bf:93:b8:d8:25:
94:47:22:42:32:73:62:e7:98:b8:d2:e9:59:10:98:e0:96:b6:
6f:3c:c7:91:a1:0b:78:97:ab:61:6d:c4:7c:6f:a2:21:e2:4b:
45:4d:4a:a0:e5:cf:a1:4e:f7:e8:a9:80:64:b1:f3:2b:87:37:
5d:e4:28:61:0b:76:8b:18:5b:fe:1f:1b:62:12:e8:a9:95:db:
a7:b4:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:47 2025 by rpki-client